Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: guzzle 7.15.1 Clear all filters
TI-2026-47651 CVE-2026-67355 · GHSA-wm3w-8rrp-j577

guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope

Priority LOW 36

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00366 Published 2026-08-01 Fixed in 7.15.1 CWE-201
TI-2026-47649 CVE-2026-67353 · GHSA-f283-ghqc-fg79

guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service

Priority LOW 37

guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00418 Published 2026-08-01 Fixed in 7.15.1 CWE-770